Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
File:                     Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json)
Hash identifier:          Zok2mVBEtH1rXZrHIcYEoUYibE3sLen4wtLZmmyL4p4=
Subject key identifier:   C9:A0:FF:01:2F:A1:29:93:C1:2D:C7:A0:06:63:41:D8:42:D0:81:85
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Certificate issuer:       /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial:       01A0C256441A53F3A52F021A83AF8C684A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
Manifest number:          048A
Signing time:             Mon 21 Sep 2026 05:00:28 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:28 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:28 +0000
Files and hashes:         1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=)
                          2: 5uFOCa8-r8p4u5DjbFcyMxWnxpk.roa (hash: six96PBP2FVtrDub0viM0uQeju8Q52lW6mmVN0at+D4=)
                          3: 66spJgWO4r5iJulLefAkdYTwISc.roa (hash: AyjLjLUdwhw2VQoEzrUJ+rotnQiPNzqjvEUgW3yJgvQ=)
                          4: AFebLvn6AH0mOGLAGY1K4fdA0ac.roa (hash: lc41gS5MnYI/Mo4Xzk3UtrseTVtRz4aEngOCwuhDcEI=)
                          5: CoLO71qrUv_4qMwwwRs5lDVCE9E.roa (hash: T4p9qnVSGm7AR+uo+khZZRMNDQd/GpzNGpYFRL2iEKU=)
                          6: G31aaGd5LlY50IGLO6eQwT_sz54.roa (hash: J+TTKw7LlUBt9s2Q/PONP/L4s5aJKpFWg7AH4f8ZIRU=)
                          7: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: EBcLhsjEQMGqiZW0muhP6+j6FL8gzEAzka87PGO6TAc=)
                          8: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=)
                          9: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=)
                          10: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=)
                          11: M9KT4OPTqeZ3tbB5Yw_-6p5AP4M.roa (hash: 4TKndIvDB4Sw7bsQeB2cpG3ywgWnyRb3WdHUGpMtbw0=)
                          12: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=)
                          13: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=)
                          14: _CTtp7ZPH0kOXThVR7wQj4XW06A.roa (hash: 6qdFfEyB76OZ8FZHFVIZ5XewiprUqvvRVqyD2drMzds=)
                          15: aApcJx1Vl6jx6w4yohNQaV1Io5Y.roa (hash: TnHtMgPhychs4GGqHiht/VWWogxSmwlOOeNfBvbp0w0=)
                          16: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=)
                          17: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=)
                          18: mT-K5wz7DGgkYoPiR_2XSlQ0B6I.roa (hash: 73E2cGSZQ8+svLr+/xrcMfyFaxZmakWAGtNSf4DhDgw=)
                          19: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=)
                          20: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (hash: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=)
                          21: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=)
                          22: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=)
                          23: zzlejXCHpXgamH633G_B9GA9p_0.roa (hash: eE86eVMiNcHiwH9DJb7Ms+ClxkfBQ1nOerPmLa6il54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:44:1a:53:f3:a5:2f:02:1a:83:af:8c:68:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
        Validity
            Not Before: Sep 21 05:00:28 2026 GMT
            Not After : Sep 22 05:00:28 2026 GMT
        Subject: CN=c9a0ff012fa12993c12dc7a0066341d842d08185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:ca:f0:a7:73:b6:de:d7:95:9a:98:3e:0e:
                    a9:bb:c4:6a:fc:6d:63:b0:e8:24:15:fc:0e:cd:44:
                    37:1b:52:b8:c0:6b:96:7e:1c:35:66:11:d6:87:ad:
                    32:7a:7a:e1:0f:fd:fc:6f:da:f3:c1:4e:f1:a7:6e:
                    c1:93:5a:da:a2:98:d4:2a:bf:4c:99:7f:14:be:e5:
                    93:4e:03:37:85:f6:2d:71:a7:f1:34:48:62:77:d2:
                    e6:86:84:13:7b:fa:7d:36:33:22:fe:53:d8:81:44:
                    3c:ea:2b:04:66:f7:64:9f:9a:f5:1a:41:33:51:69:
                    6d:01:5b:19:31:6a:de:d5:2f:9e:ab:11:fe:99:ca:
                    43:b3:7a:97:94:44:ea:6e:92:9f:d1:ba:44:41:bd:
                    92:02:7d:9b:9e:71:a9:f3:b5:64:51:69:ee:22:48:
                    fe:c8:13:9d:09:d1:47:4e:15:7f:10:70:a6:cd:8f:
                    22:cb:fb:a6:ce:66:e1:45:28:b3:12:ff:16:7c:73:
                    ab:18:7c:99:49:1c:6b:b5:d1:e2:be:d3:ab:da:ca:
                    9c:81:8e:b0:ff:d2:26:92:08:71:cd:bd:99:ba:d3:
                    7a:17:17:6c:c9:cb:ba:c6:31:46:a8:33:fd:ea:38:
                    cd:bf:1a:3d:7f:44:6d:66:17:16:08:1f:e3:ce:f4:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:FF:01:2F:A1:29:93:C1:2D:C7:A0:06:63:41:D8:42:D0:81:85
            X509v3 Authority Key Identifier:
                keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:33:eb:91:40:20:e6:6d:77:b0:3b:42:c9:03:3c:2a:8e:a1:
         b1:a4:cb:82:49:75:dc:1e:8d:08:66:76:b2:38:63:cd:2e:2d:
         ac:95:07:bd:fd:7a:64:dc:96:e6:df:46:0c:33:63:6c:34:3f:
         56:b4:06:98:55:b9:19:69:46:ed:b9:d1:41:6d:5f:fb:db:fa:
         89:ed:ad:1f:3f:ba:89:59:27:ab:e9:b9:8e:82:01:69:c0:7e:
         30:32:1f:66:4c:6b:ea:be:3d:34:ea:d4:25:b7:e4:c1:ee:81:
         cc:1b:88:f4:e6:c2:56:d7:ff:dc:e5:94:f3:bd:b8:a0:bb:49:
         5e:2d:47:b5:48:9b:71:ec:12:d9:6f:9a:e3:24:16:07:93:4a:
         33:04:f7:a8:85:28:0d:aa:36:10:1b:5d:95:dd:90:9d:76:84:
         24:46:27:7d:bc:8f:6f:00:3a:66:c0:7c:18:82:69:18:ee:d2:
         9c:90:e0:85:1f:b0:19:7f:dc:b0:a4:63:79:95:eb:de:18:df:
         31:94:16:6b:0a:d4:14:83:35:57:d1:da:45:38:e6:a1:73:c7:
         ba:52:ac:dd:95:3c:4a:6c:08:da:45:06:aa:8b:5d:22:23:ca:
         29:93:1d:e3:71:01:fa:df:24:f3:ba:d4:64:96:b6:68:a7:28:
         bb:95:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:10:56 2026 by rpki-client